$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa File: bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa (raw, json) Hash identifier: PF2ZUV+8tpOTxOC1S8VcEkw4zbIqxr4rx+DComdP1wg= Subject key identifier: 24:40:DD:11:D7:91:CF:8E:F4:32:91:5E:4D:81:ED:63:6E:1C:41:B7 Certificate issuer: /CN=c1195660-b269-4bf9-a104-54a76ebf3546 Certificate serial: 010D0C9F4328584CCD0C8B5A7C20E8F2F829F480 Authority key identifier: 50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 13335 IP address blocks: 66.71.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:8b:5a:7c:20:e8:f2:f8:29:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1195660-b269-4bf9-a104-54a76ebf3546 Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=54ef4a5b-af29-4519-a096-e221b1718622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:80:6b:04:41:dc:b2:cd:c1:3a:1a:7f:4e: ca:11:98:3a:42:00:24:a5:12:7a:d8:88:0b:40:40: 9a:25:e2:b3:2a:b5:d5:48:b5:73:e1:0d:b1:ea:1d: 32:4a:32:8a:98:2b:11:78:e3:7c:a2:5d:b5:03:2b: aa:4d:47:a1:17:59:d8:20:c1:f2:e4:6d:0d:37:dd: 66:2e:95:de:3c:00:5b:3c:a1:c4:72:be:bc:20:a6: 6b:f6:89:96:a2:1c:18:d6:c2:bd:8e:09:39:d8:77: a1:50:2b:68:d9:06:7a:d5:e9:95:8d:f9:49:30:c3: ef:7d:24:77:ba:b4:04:f1:6f:ab:39:88:9d:6b:c4: b0:ac:13:04:ad:e2:31:50:da:32:9a:cb:76:83:9a: d4:aa:e2:f3:81:c7:62:05:7f:c4:a4:34:2e:79:08: 9c:23:8e:df:cc:f9:66:e9:ae:fd:ad:b6:15:8e:0a: ee:54:fd:4b:85:97:5e:a4:6a:1a:91:6c:1f:9c:85: 16:36:b7:f3:50:89:4c:ee:74:c4:b7:ce:b3:a0:f2: 74:17:90:f6:a3:3b:49:a2:19:2a:d5:40:c6:50:bb: 27:11:ac:cb:41:4e:ce:9d:f8:c8:50:77:1c:25:31: 7d:65:7d:ae:f8:2d:49:d4:d8:d3:ab:37:ca:17:12: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:40:DD:11:D7:91:CF:8E:F4:32:91:5E:4D:81:ED:63:6E:1C:41:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/bfa9e1e2-b20e-3db3-a17d-e5c494b08e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546/c1195660-b269-4bf9-a104-54a76ebf3546.crl X509v3 Authority Key Identifier: keyid:50:2D:B7:50:06:C8:ED:DC:6D:F6:1D:94:C8:76:CC:2F:F4:A9:64:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c1195660-b269-4bf9-a104-54a76ebf3546.cer sbgp-ipAddrBlock: critical IPv4: 66.71.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c7:3f:67:93:14:ee:51:7e:5c:6a:5a:54:b0:96:64:11:00: 9e:cb:ca:25:8e:1f:66:0e:27:b4:1d:a9:e3:e0:49:11:0e:d6: 20:8d:dc:c5:d6:22:71:70:53:4a:bb:3b:da:01:ba:cc:07:72: f9:28:9a:73:1a:3e:a3:25:6d:5f:07:2a:12:88:c6:f6:dd:11: 7e:f6:53:ad:37:6a:3a:4d:92:48:03:ed:fa:49:e8:13:14:61: c5:99:e5:ba:7e:4e:dd:ae:60:42:a6:41:25:b4:92:c0:fc:bb: b3:00:97:69:01:90:db:5d:50:bf:01:52:4e:f3:33:a7:f5:05: 16:b4:df:3a:ef:2d:22:0e:0f:42:1d:c6:a1:69:04:88:4e:f8: a4:63:13:56:b1:6d:e2:1c:5a:8e:03:ce:41:03:c2:0c:c8:28: 1f:86:0a:37:ac:2c:0a:cd:55:7c:11:03:8c:5a:47:15:13:8e: b0:6c:ee:72:8a:22:7c:38:17:51:72:d0:28:7c:66:8d:de:9c: 1c:10:6a:bb:e1:75:d8:00:50:a6:94:40:d2:2f:81:d0:39:8d: 01:03:1b:9d:50:dd:cc:dd:25:a2:b9:d6:84:68:ba:a8:70:82: 01:cd:af:e2:fd:ae:04:ee:88:df:99:80:4b:0f:ca:10:4f:8d: a2:5f:3d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDItafCDo8vgp9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzExOTU2NjAtYjI2OS00YmY5LWExMDQtNTRhNzZlYmYz NTQ2MB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk NTRlZjRhNWItYWYyOS00NTE5LWEwOTYtZTIyMWIxNzE4NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6AawRB3LLNwToaf07KEZg6QgAkpRJ62IgL QECaJeKzKrXVSLVz4Q2x6h0ySjKKmCsReON8ol21AyuqTUehF1nYIMHy5G0NN91m LpXePABbPKHEcr68IKZr9omWohwY1sK9jgk52HehUCto2QZ61emVjflJMMPvfSR3 urQE8W+rOYida8SwrBMEreIxUNoymst2g5rUquLzgcdiBX/EpDQueQicI47fzPlm 6a79rbYVjgruVP1LhZdepGoakWwfnIUWNrfzUIlM7nTEt86zoPJ0F5D2oztJohkq 1UDGULsnEazLQU7OnfjIUHccJTF9ZX2u+C1J1NjTqzfKFxKBSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRA3RHXkc+O9DKRXk2B7WNuHEG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5 NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3NmViZjM1NDYvYmZhOWUxZTItYjIwZS0z ZGIzLWExN2QtZTVjNDk0YjA4ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzExOTU2NjAtYjI2OS00YmY5LWEx MDQtNTRhNzZlYmYzNTQ2L2MxMTk1NjYwLWIyNjktNGJmOS1hMTA0LTU0YTc2ZWJm MzU0Ni5jcmwwHwYDVR0jBBgwFoAUUC23UAbI7dxt9h2UyHbML/SpZLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTE5NTY2MC1iMjY5LTRiZjktYTEwNC01NGE3 NmViZjM1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQkfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvHP2eTFO5RflxqWlSwlmQRAJ7LyiWOH2YOJ7QdqePgSREO1iCN3MXW InFwU0q7O9oBuswHcvkomnMaPqMlbV8HKhKIxvbdEX72U603ajpNkkgD7fpJ6BMU YcWZ5bp+Tt2uYEKmQSW0ksD8u7MAl2kBkNtdUL8BUk7zM6f1BRa03zrvLSIOD0Id xqFpBIhO+KRjE1axbeIcWo4DzkEDwgzIKB+GCjesLArNVXwRA4xaRxUTjrBs7nKK Inw4F1Fy0Ch8Zo3enBwQarvhddgAUKaUQNIvgdA5jQEDG51Q3czdJaK51oRouqhw ggHNr+L9rgTuiN+ZgEsPyhBPjaJfPXY= -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:25 2026 by rpki-client